| @@ -27,9 +27,9 @@ | ||
| 27 | 27 | } |
| 28 | 28 | |
| 29 | 29 | $settings = wp_parse_args( $settings, $defaults ); |
| 30 | 30 | |
| 31 | - echo wp_kses_post( $this->field_before() ); | |
| 31 | + echo $this->field_before(); | |
| 32 | 32 | |
| 33 | 33 | if ( ! empty( $this->field['from_to'] ) ) { |
| 34 | 34 | |
| 35 | 35 | $args = wp_parse_args( $this->field, array( |
| @@ -41,20 +41,20 @@ | ||
| 41 | 41 | 'from' => '', |
| 42 | 42 | 'to' => '', |
| 43 | 43 | ) ); |
| 44 | 44 | |
| 45 | - echo '<label class="adminify--from">'. esc_attr( $args['text_from'] ) .' <input type="text" name="'. esc_attr( $this->field_name( '[from]' ) ) .'" value="'. esc_attr( $value['from'] ) .'"'. $this->field_attributes() .' data-type="from" /></label>'; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- field_attributes() escapes each attribute via esc_attr() | |
| 46 | - echo '<label class="adminify--to">'. esc_attr( $args['text_to'] ) .' <input type="text" name="'. esc_attr( $this->field_name( '[to]' ) ) .'" value="'. esc_attr( $value['to'] ) .'"'. $this->field_attributes() .' data-type="to" /></label>'; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- field_attributes() escapes each attribute via esc_attr() | |
| 45 | + echo '<label class="adminify--from">'. esc_attr( $args['text_from'] ) .' <input type="text" name="'. esc_attr( $this->field_name( '[from]' ) ) .'" value="'. esc_attr( $value['from'] ) .'"'. $this->field_attributes() .' data-type="from" /></label>'; | |
| 46 | + echo '<label class="adminify--to">'. esc_attr( $args['text_to'] ) .' <input type="text" name="'. esc_attr( $this->field_name( '[to]' ) ) .'" value="'. esc_attr( $value['to'] ) .'"'. $this->field_attributes() .' data-type="to" /></label>'; | |
| 47 | 47 | |
| 48 | 48 | } else { |
| 49 | 49 | |
| 50 | - echo '<input type="text" name="'. esc_attr( $this->field_name() ) .'" value="'. esc_attr( $this->value ) .'"'. $this->field_attributes() .'/>'; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- field_attributes() escapes each attribute via esc_attr() | |
| 50 | + echo '<input type="text" name="'. esc_attr( $this->field_name() ) .'" value="'. esc_attr( $this->value ) .'"'. $this->field_attributes() .'/>'; | |
| 51 | 51 | |
| 52 | 52 | } |
| 53 | 53 | |
| 54 | - echo '<div class="adminify-datetime-settings" data-settings="'. esc_attr( wp_json_encode( $settings ) ) .'"></div>'; | |
| 54 | + echo '<div class="adminify-datetime-settings" data-settings="'. esc_attr( json_encode( $settings ) ) .'"></div>'; | |
| 55 | 55 | |
| 56 | - echo wp_kses_post( $this->field_after() ); | |
| 56 | + echo $this->field_after(); | |
| 57 | 57 | |
| 58 | 58 | } |
| 59 | 59 | |
| 60 | 60 | } |